Question

A security engineer needs to grant a group of developers permission to read objects from a single Amazon S3 bucket and nothing else. The company follows a strict security standard that employees should only receive the exact permissions required to perform their job. Which approach best follows this standard?

Accepted Answer

Create an IAM policy that allows only read actions on the specific bucket and attach it to the developer group.

Answer

Attach the AWS managed AdministratorAccess policy to the developers so they can access any resource they might need.

Answer

Share the AWS root user credentials with the developers so they can access the bucket directly.

Answer

Attach the AmazonS3FullAccess managed policy to each developer so they can work with all S3 buckets.